Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“After a good two years, my tax advisor told me I should switch to BMD instead.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2524110285

Proof data

Record hash (SHA-256)

72b8a6193c026a3b4f8462f09fe1f654aabdc28a65cabe031c0acefc2f7aa8bd

Signature (Ed25519, base64)

iorUpPWbK6IZFc89I842efPZa8evbnsuTZx49wEYx7JxqjQtWh65bw7GoLTQZhGvSCRNaqHp3PX/QBCOZCPUAA==

Merkle root

1154a265a990612db5567445e00872656e7ced32aff0b18660887a40a375699b

Merkle path

["72b953dcc339953f52113f2ee5422cc4b5ff01c9178ad96792a06a0c18527ddd","c81ca8dc763e017be2a1afc0b9eac32bbdd7480f0cf05eb7c0d232d881a7b5c6","75ab70fb94cec3e98da682fada1c6a42b44853df11632f429ac7b31faf287eb1","97f0ba67621e15ca3363ab7e1274099236ecdfea8e2d6318c7d4d7f061cb5f0b","d3efb8df9ae6461d130692316cf28b6628e881296b0803e49e4f88ec23d02c2f","08255e96c6fa79d209c6194b35b2d40f59fbd21918c1aafd984df2c1096f088c","70fbe50b04edc711e83d5df60b6744cd6c9ab1c54a467625e05ccf743417a13e","a4ee45dba342b170bb66b706f9f22317d0d9a06b57a7a3acc754675199ab3cff","5bfd26074f1e5b96844f43f811a6772afaed669703a969eec8bfa8b3ab2e294a","cda22b314e6306aa8712a712dd54ef6be573a5c70ee480cec72c69df27476964","450ad7508bbb470cd2e76742f0ff251c897f535469b6e6f0481ed7e8d06b6d00","8ea4b812a510f86d597b02a5c2a5c372cc7c87c60caf3660f13038a7f04f0b49","7b43375efa91b25bb70837c8d1e426ce38032262734dff0ff0d3f14b97b752f6","602297dc52019bf7e809df446e2304ee5209e9b092e15c29026ad3b8e527c6fc","8f93c563d7c563da751df1a0efbe13b6ce9bd7032eb6dd0a995c545aff2f5a1d"]

Anchored

2026-08-20

Public log entry

search.sigstore.dev, log index 2524110285 · entry 108e9186e8c5677a87bd…

Expected log hash

34efb4ec1aab60168b83ec62d0334b8e10d9814c0de0cc0d3569d176ff20bc2d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787152786156","kind":"published-quote","locale":"en","page":"theme:sevdesk/returns/en","quote":"After a good two years, my tax advisor told me I should switch to BMD instead.","rating":1,"review_date":"2026-03-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1154a265a990…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.